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Abstract 

The Hamming weight enumerator function of the formally self-dual 
even, binary extended quadratic residue code of prime p = 8m + 1 is 
given by Gleason's theorem for singly-even code. Using this theorem, 
the Hamming weight distribution of the extended quadratic residue 
is completely determined once the number of codewords of Hamming 
weight j Aj, for < j < 2m, are known. The smallest prime for 
which the Hamming weight distribution of the corresponding extended 
quadratic residue code is unknown is 137. It is shown in this paper that, 
for p = 137 A2m = ^34 may be obtained without the need of exhaustive 
codeword enumeration. After the remainder oi Aj required by Gleason's 
theorem are computed and independently verified using their congru- 
ences, the Hamming weight distributions of the binary augmented and 
extended quadratic residue codes of prime 137 are derived. 

1 Introduction 

The Hamming weight distribution of a linear error correcting code is of 
practical and theoretical interest. It provides a great deal of information on 
the code capability in detecting errors and in correcting errors or erasures. 
The complexity of computing the Hamming weight distribution of a code 
is exponential. In general, the computation requires one to enumerate all 
codewords of the code; or to enumerate all codewords of the dual and apply 
the Mac Williams identity. 

Since the birth of coding theory, various algebraic error correcting 
codes have been discovered. One classic family of such codes is the family 
of quadratic residue (QR) codes, which has rich mathematical structure and 
good error correcting capability. Despite having these advantages, the con- 
struction of its algebraic decoder is non trivial. Due to the existence of rich 
mathematical structure, there are considerable restrictions on the weight 



structure of this family of codes and therefore it is not necessary to enumer- 
ate all codewords or those of the dual in computing the Hamming weight 
distribution. In fact, by knowing a fraction of the Hamming weight distri- 
bution, the complete distribution can be obtained. Recently, this method 
has been used by Gaborit et al [1] to obtain the Hamming weight distribu- 
tions of binary extended QR codes of primes 73, 89, 97, 113 and 127^. In 
our previous work [2, 3], we have evaluated the Hamming weight distribu- 
tions of the extended QR codes of primes 151 and 167. The smallest prime 
for which the Hamming weight distribution of the corresponding extended 
QR code is not known in 137 and in this paper, its Hamming weight distri- 
bution is evaluated. We show that even smaller fraction of the Hamming 
weight distribution is sufficient to derive the complete Hamming weight 
distribution. 

The remainder of this paper is organised as follows. Section 2 gives 
the definition and notation that we use in this paper-including a brief recall 
of the binary QR codes. Section 3 discusses the modular congruence of the 
number of codewords of a given Hamming weight and the Hamming weight 
distribution of the extended QR code of prime 137 is derived in Section 4. 

2 Definition and Notation 

Let F2 be a space of vector of length n whose elements take value over 
F2 (binary field). An [n, k, rf] binary linear code C of length n, dimension 
k and minimum Hamming distance d, is a fc-dimensional subspace of Fj. 
Let x,y e F2 , the scalar product of these two vectors is defined as x ■ y = 
Sj=o ^jVj (mod 2). Given a code C, the dual code is defined as = {c^ \ 
c • c-'- = for all c e C and e Fj }. The hull of a code C is defined as 

jf(C) = cnc-L. 

The Hamming weight of a vector v e F2, denoted by wtniv), is the 
number of its non zero coordinates and the minimum Hamming distance of 
C is simply the smallest Hamming weight of all codewords in C. Throughout 
this paper, we deal exclusively with Hamming space and for convenience, 
the word "Hamming" shall be omitted. The weight enumerator function of 
C is given by 



where z is an indeterminate and Aj is the number of codewords of weight 
j. The distribution oi Aj for < j < nis called the weight distribution of a 
code. 

Given a vector v e F2 of even weight, if wtniv) = (mod 4), it is 
termed doubly-even; otherwise wtniv) = 2 (mod 4) and it is termed singly- 
even. An even code is one which has codewords of even weight only. A 
code C is called self-dual if C = C-'-. A self-dual code may be doubly-even 
if the weight of all codewords is divisible by 4 or singly-even if there are 

^The Hamming weight distribution of that of prime 151 is also given in [1], but we have 
shown that this result has been incorrectly reported, refer to [2] for the detailed discussion. 
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codewords whose weight is congruent to 2 (mod 4). In addition to self-dual 
code, there also exists formally self-dual code. A code C is termed formally 
self-dual if C^^C^ but Ac{z) = Ac± (z). 

2.1 Quadratic Residue Codes 

In this subsection, a brief summary of QR codes over F2 is given [4]. Binary 
QR codes are cyclic codes of prime length p where p = ±1 (mod 8). Let 
Q and N be sets of quadratic residue and non quadratic residue modulo p 
respectively. Given a prime p, there are four QR codes denoted by Qp, Np, 
Qp and Afp. If a is a primitive p-root of unity, the generator polynomial 
of the [p, ip + l)/2,rf — 1] augmented QR codes Qp and Np contains roots 
whose exponents are element of Q and N respectively. The [p, {p - l)/2, d] 
expurgated QR codes Qp and l\fp contain, in their generator polynomial, a° 
in addition to the roots of the respective augmented QR codes. Note that 
Qp (resp. Qp) is permutation equivalent to Np (resp. Np). 

If p = -1 (mod 8), Q^ = Qp and as such the [p + 1, (p + l)/2,d] 
extended QR code Qp is self-dual and doubly-even. For p = I (mod 8), 
Qp = Np and therefore Qp ^ Q^ but Aq [z) = A^^ {z) implying the corre- 
sponding extended QR code is formally self-dual. 

In this paper, we are interested in the QR codes where p=l (mod 8), 
in particular p ~ 137. Since the extended code is formally self-dual, the re- 
strictions on the weight structure imposed by Gleason's theorem for singly- 
even code applies. This implies that for a given prime p = 8m + 1, the weight 
enumerator function [z] is given by [5] 

m 

^g^(z) = ^i^,(l + z')"^+H^'(l--z')'F (2) 

for some integer Kj. Equation (2) shows that the complete weight distribu- 
tion can be derived once the first m even terms of Aj (Ao = 1 by definition) 
are known. Note that Qp is an even code and thus A-j = for odd integer j. 

3 Congruence of the Number of Codewords of 
a Given Weight 

It is known in the literature that the automorphism group of Qp, denoted by 
Aut(Qp), contains the projective special linear group PSL2(p) [4]. This lin- 
ear group is generated by a set of permutations on the coordinates (00, 0, 1, . . . , p- 
1) of the form y {ay + b)/{cy + d) where a, b,c,de ¥p, y e ¥pU {00} and 
ad~ be ~ 1. This set of permutations may be produced by the transforma- 
tions^ S : y ^ y + 1 and T : y ^ —y^^- The knowledge of the automorphism 
group of a code may be exploited to characterise the weight distribution of 
the code. 

^In some cases, we can see that, in addition to S and T, the transformation V : y ^ fpy 
where p is a generator of Fp also generates the desired permutation of PSL2(p). However, 
strictly speaking, V is redundant since V = TS''TS'^TS'' where fj, = (mod p). 
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Let Aut(Qp) D PSL2(p) = 7i, the number of weight j codewords Aj 
can be categorised into two classes: one which contains all weight j code- 
words that are invariant under some element of H and another which con- 
tains the rest. Given a codeword of Qp that is not invariant under some 
element of 7Y, applying all \Ti.\ = ^pip^ — 1) permutations will result in 
distinct codewords of Qp- In other words, the latter class forms orbits of size 
equal to the cardinality of PSL2(p). Let Aj{H) denote the number of weight 
j codewords which are invariant under some element of 7Y, we may write 

A,=ny\U\-rA,(ri) 

1 (3) 

^A,{n) (mod ^ 1)) 

for rij e Z* = {0} U Z+ i.e. non negative integer. Since \H\ can be factorised 
as H = Hi lT where qi is a prime and e, is a positive integer, it is shown in 
[6] that Aji^) may be obtained by applying the Chinese Remainder The- 
orem to Aj(S'gJ (mod ql^) for all primes qi that divide \H.\. Note that Sq^ 
is the Sylow-qrsubgroup of 7Y and Aj (5qJ is the number of codewords of 
weight j fixed by some element of 5",^ . 

For each prime g^, in order to compute A.j{Sq^), the subcode which is 
invariant under some element of 5^, needs to be obtained. For odd primes 
qi, Sq. is cyclic and there exists [° ^] eH, for some integers a, b, c, d, which 
generates cyclic permutation of order q.i. Thus, it is straightforward to ob- 
tain the invariant subcode and the corresponding Aj{Sq^). On the other 
hand, if qi = 2, 52 is a dihedral group of order 2'^, where s is the highest 
power of 2 that divides |7Y|, and A.j{S2) is given by [6] 

Aj{S2) = {2'~^ + l)A,{H2)-2'~''A,{Gl)-2''-''A,{G\) (mod 2«), (4) 

where H2 and G\, for i 0, 1, are subgroups of order 2 and 4 respectively, 
which are contained in ^2. Let P eHoi order 2'"i and T = e H of 

order 2, it is shown in [6] that H2 = {1, } and the non cyclic subgroup 

Gi = {l,P^''\P'T, P^°'''+'T}. 

4 The Weight Distribution 

Following Gleason's theorem, see (2), the weight distribution of the binary 
extended QR code of prime 137 is given by 

^Q^.M = E K^i^ + ^'r-''{^' - + z'y. (5) 
3=0 

Since Aq = 1 and the minimum distance of Q137 is 22, only A2j, for 11 < j < 
17, are required in order to deduce Aq^^_{z) completely. Note that each A2J 
determines Kj for some integer j. However, following the idea in [6] which 
has been relatively forgotten, Kn may be determined without the need of 
exhaustively computing ^34 as shown in this section. 

Let us first deduce the modular congruence of ^2j , for 11 < j < 17, of 
Q137. Some of these congruences have been given in the authors' previous 
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work [2], but are restated in the following to make the paper self-contained. 

For p = 137, it is clear that = 2^ • 3 • 17 • 23 • 137 = 1285608. Let P = [ °j H ] 
and let [ 135 i ] > [ 136 6 ] [ lie 11 ] generators of permutation of orders 3, 
17 and 23 respectively. It is not necessary to find a generator that generates 
permutation of order 137 as it fixes the all zeros and all ones codewords 
only. Subcodes that are invariant under H2, G4, G4, 6*3, 6*17 and ^23 are 
obtained and the number of weight 2j, for 11 < j < 17, codewords in these 
subcodes are then computed. The results are tabulated as follows, where k 
denotes the dimension of the corresponding subcode. 





H2 






^3 




<5'23 


'S'137 
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35 


19 


18 


23 
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A22 


170 
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6 














A2i 


612 


10 


18 


46 











-426 


1666 


36 
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-428 


8194 


36 


60 














-430 


34816 


126 


22 


943 











-432 


114563 


261 


189 














-434 


343453 


351 


39 





2 









For p = 137, (4) becomes 

A2,{S2) = 5A2j{H2) - 2A2,(G°) - 2A2j{Gl) (mod 8) 
and using this formulation, the following congruences 



-422(^2) 


= 2 


(mod 8) 


-424(^2) 


4 


(mod 8) 


-426(^2) 


= 6 


(mod 8) 


-428(52) 


= 2 


(mod 8) 


-430(^2) 


= 


(mod 8) 


-432(52) 


= 3 


(mod 8) 


^34(52) 


= 5 


(mod 8) 



are obtained. 

Combining all the above results using the Chinese-Remainder- Theorem, 
it follows that 



-422 


= "22 


1285608 H 


-321402 


-424 


= "24 


1285608 H 


- 1071340 


-426 


= "26 


1285608 H 


- 964206 


-428 


= "28 


1285608 H 


-321402 


-430 


= "30 


1285608 H 


- 428536 


-432 


= "32 


1285608 H 


- 1124907 


-434 


= "34 


1285608 H 


- 1143813 



for some non negative integers 712 j ■ 

Let G be the generator matrix of the half-rate code Q137. In order to 
efficiently count the number of codewords of weight 2j, two full-rank gener- 
ator matrices, say Gi and G2, which have pairwise disjoint information sets 
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are required. These matrices can be easily obtained by performing Gaus- 
sian elimination on G to produce Gi = [I\A\ and repeating the process on 
submatrix A to produce G2 — For each of these full-rank matrices, 

we need to enumerate as many as 




codewords and count the number of those of weight 2j. The efficiency of 
enumeration may be improved by employing the revolving door combina- 
tion generator algorithm [7], which has the property that in two successive 
combination patterns, there is only one element that is exchanged. In ad- 
dition to this, the revolving door algorithm also has a nice property that 
allows the enumeration to be realised on grid computer, see Appendix A.l. 
We have evaluated A2J, for 11 < j < 16, using a grid of approximately 1500 
computers and the results are given below 

A22 = 321402 
A2i = 2356948 
^26 = 21533934 
A28 = 490138050 
^30 = 6648307504 
A32 = 77865259035. 

Comparing (6) and (7), it can be clearly seen that^ 7122 ~ 0, ^24 = 1, n2e = 16, 
?i28 ~ 381, nso = 5171 and 77,32 = 60566. The non negative integer solutions 
of n2j give an indication that the corresponding A2j has been accurately 
computed. 

We now show that A34 is known. It is worth noting that knowing 
A34, based on the arguments on codeword counting given above, signifi- 
cantly reduces the complexity of computing Aq^^^{z). Consider Gleason's 
formulation given in (5), if we take its first derivative with respect to z, we 
have 

|2(69 - 4:j)z{z^ - 2z'^ + z'^)+ 

i(l + z2)(2z-8z3 + 62'^)} (8) 

^Note that A2j, for 11 < j < 16, have also heen given in [1], however, A30 and A32 have 
been incorrectly reported as demonstrated in [2]. 
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which may be expanded as 



d 



(1 + z^){2z - 8z^ + 6z^)|Xi+ 

(1 + z^f"{z^ - 2z* + z^)[\22z{z' - 2z^ + 2^)+ 

^ , (9) 
2(1 + z^){2z - + 6z5)|K2+ 

17(1 + z2)(2z - 8z3 + %z^)^Kxi. 

From (9), we can see that the terms that involve Kj for < j < 16 become 
zero if we set z = i = \J~^. Thus, 



= -i2^^KxT. (10) 



Since Aut(Qp) is doubly- transitive, given A-i^ of an extended QR code 
Qp, the number of codewords of weight 2] — 1 and 2j in the augmented 
code Qp are -i^Aij and ^"^^"^^^ ^2-,- respectively Following [8], the weight 

enumerator function of Q137 may be written in terms of that of Q137 as 
follows 

Aq,,-(z)=Aa (z)+fi^^A^ (;.). (11) 

From (5), it is obvious that (z) 

' yi37 ^ ' 



^Sl37(^) 



= and therefore (11) becomes 

z—\ 

1 - i, 
138" 



= -i^r:^ 235^17. (12) 



The expurgated QR code Q137 is an even code and following [4], 2^37 — 
A/137. We can see that the exponents of the zeros of Q137 are in the set 
Q U {0}, whereas those of A/137 are in the set N , and thus the hull of Q137 
has dimension zero. It follows from [9, Lemma 7.8.3 pp. 276] that the code 
Q137 may be decomposed into an orthogonal sum of either 34 subcodes each 
consisting of three doubly-even and one singly-even codewords; or 33 sub- 
codes each consisting of three doubly-even and one singly-even codewords, 
in addition to one subcode containing one doubly-even and three singly- 
even codewords. As a consequence, if denotes the number of codewords 
of weight congruent to w (mod 4) in Q137, we have, see [9, Theorem 7.8.6 
pp. 277] 

Wq-W2^ ±2^4. (13) 
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Note that this result also holds for Q137 as Q137 is the even weight subcode 
of Q137. Since all ones codeword 1^ e S137, it follows that 

Wi-W3 = ±2^4 (14) 

for the augmented QR code. Substituting z with i in the weight enumerator 
function of Q137, we have 

^Si37(-2) = + i^i - ^2 - i^3 + 
A4 + iAs - Ae- iA7+ 

— ^130 — 1^131 + ^132 + 1^133 

- ^134 - 1^135 + ^136 + 1^137 

j=0 mod 4 j = 2 mod 4 

4 E E 

j=l mod 4 mod 4 

= [Wo - W2] +i[Wi- W3] 
and thus, following (13) and (14), 

Aq,,,{z) ±234(1 + (15) 



Equating (12) and (15), 



-i^23^i^i7-±2^^(l + i), 



we arrive at 

Ku = if69. (16) 

Using (7), A2j = for 1 < j < 10 and Aq = 1, Kj for < j < 16 are 
determined. Substituting these into (5) and equating the coefficients of z^^ 
with A34, we have 

A34 = 771068968296 + Kn. (17) 

Consider the case for Kn = -69, A34 = 771068968227. Comparing this ^34 
with the congruence given in (6), it follows that 7134 ^ Z* and hence this 
rules out the possibility of Kn = -69. If A'17 = 69, however, 

^34 = 771068968365 (18) 

and it follows that 7134 — 599769 G Z*, indicating that Kn is indeed 69. 

Now we have determined ^134 (and hence Kn) without exhaustively 
counting the number of codewords of weight 34 in Q137. The weight dis- 
tribution of Q137 can be straightforwardly deduced from (5) and so is that 
of Q137 from (11). The weight distributions of the augmented and also the 
extended QR code of prime 137 are tabulated in Table 1. Note that since 
the weight distributions are symmetrical, only the first half terms are tab- 
ulated. 
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A Appendix 



A.1 Parallel Realisation of Codeword Enumeration 

In this appendix, a method to enumerate codewords in parallel is described 
and for a detailed description, refer to [7, 10, 11]. Let denote the combi- 
nation of t out of s elements with the combination pattern represented by 
an ordered set atat-i . . . ai, where ai < a2 < . . . < at-i < at. A pattern is 
said to have rank r if this pattern appears as the (r + l)th element in the 
list of all combinations. Here, it is assumed that the first element in the 
list of all combinations has rank 0. The combination C^, which follows 
the revolving door constraint and has an ordered set pattern, exhibits the 
following property 

Consequently, this implies that, for the revolving door combination patterns 
of the form atat-i . . . ai, if those of fixed at are considered, the maximum 
and minimum ranks of such patterns are {"'*^^) — 1 and respectively. 

Let Rank(atai_i . . . ai) be the rank of the pattern atat-i . . . ai, the re- 
volving door combination also has the following recursive property on its 
rank. 



Rank(atat_i . . . ai) 



at + 1 



1 



Rank(at_i . . . ai). (19) 



As an implication of this, if all ( j) codewords need to be enumerated, for 
some integers k,t > and k >t, we can split the enumeration into [(^) /M] 
blocks where in each block only at most M codewords need to be enumer- 
ated. In this way, the enumeration of each block can be done on a separate 
computer-allowing parallelism of codeword enumeration. We know that at 
the jth block, the enumeration would start from rank {j — 1)M and the cor- 
responding pattern can be easily obtained by making use of (19) as well as 
the maximum and minimum ranks of the patterns of fixed at. 
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Table 1: The weight distributions of [137, 69, 21] augmented and [138, 69, 22] 
extended quadratic residue codes 



j 


Qi37 = [137,69,21] 


Qi37 = [138,69,22] 





1 


1 


21 


51238 





22 


270164 


321402 


23 


409904 





24 


1947044 


2356948 


25 


4057118 





26 


17476816 


21533934 


27 


99448300 





28 


390689750 


490138050 


29 


1445284240 





30 


5203023264 


6648307504 


31 


18055712240 





32 


59809546795 


77865259035 


33 


189973513945 





34 


581095454420 


771068968365 


35 


1709208146190 





36 


4842756414205 


6551964560395 


37 


13221982102853 





38 


34794689744350 


48016671847203 


39 


88328700833460 





40 


216405317041977 


304734017875437 


41 


511980845799941 





42 


1170241933257008 


1682222779056949 


43 


2585374360137184 





44 


5523299769383984 


8108674129521168 


45 


11414864729214318 





46 


22829729458428636 


34244594187642954 


47 


44202380361406672 





48 


82879463177637510 


127081843539044182 


49 


150535995889831600 





50 


264943352766103616 


415479348655935216 


51 


451961780387038844 





52 


747475252178564242 


1199437032565603086 


53 


1198781830242451728 





54 


1864771735932702688 


3063553566175154416 


55 


2814110491202421488 





56 


4120661790689260036 


6934772281891681524 


57 


5855675469990794812 





58 


8076793751711441120 


13932469221702235932 


59 


10814690610004223000 





60 


14059097793005489900 


24873788403009712900 


61 


17746731937729182608 





62 


21754058504313191584 


39500790442042374192 


63 


25897686719588958304 





64 


29944200269524733039 


55841886989113691343 


65 


33629639551783390742 





66 


36686879511036426264 


70316519062819817006 


67 


388771429781400920^^ 





68 


40020588359850094710 


78897731337990186714 



